This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft File: rFjrfGF1DM4zPNACbHfJPL5GXZg.mft (raw, json) Hash identifier: lCMa8oXs6IySXwiyv+89wVg1319xBu3SI5SjpRWjvYI= Subject key identifier: 83:64:5A:F0:56:44:99:6E:D4:4F:45:5E:01:3C:9A:A3:CA:0B:FA:9C Authority key identifier: AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98 Certificate issuer: /CN=ac58eb7c61750cce333cd0026c77c93cbe465d98 Certificate serial: 019B2D41C43DDE2E8B1C59B55DC322B30757 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft Manifest number: 0BCF Signing time: Wed 17 Dec 2025 17:00:43 +0000 Manifest this update: Wed 17 Dec 2025 17:00:43 +0000 Manifest next update: Thu 18 Dec 2025 17:00:43 +0000 Files and hashes: 1: dYveMxpV9vTvL48rADeNQga7MgQ.roa (hash: cc3Bn2ZybQkob9bKAAN2kkILYEKK4Ym19QeA8svRfJQ=) 2: rFjrfGF1DM4zPNACbHfJPL5GXZg.crl (hash: xAqN62ooDA+IoyRSzb1jofCeZRDlnjxdaNaUvSQPbb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 17:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:41:c4:3d:de:2e:8b:1c:59:b5:5d:c3:22:b3:07:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac58eb7c61750cce333cd0026c77c93cbe465d98 Validity Not Before: Dec 17 17:00:43 2025 GMT Not After : Dec 18 17:00:43 2025 GMT Subject: CN=83645af05644996ed44f455e013c9aa3ca0bfa9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c7:15:d7:66:c7:a2:43:a0:12:fa:ce:c0:7c: 42:43:b9:1f:3c:6e:4b:d9:ae:05:a8:2a:d3:dc:6a: ac:5d:5e:a4:3e:f4:26:be:f7:40:54:6f:86:af:19: 8a:87:1f:01:b5:5a:0e:3b:9e:5b:b0:a5:8c:92:45: 7c:b9:ec:dd:a6:d5:2c:6f:fc:9a:a6:98:a9:aa:2e: 40:4a:65:78:43:5c:2b:29:b0:3d:32:d1:7b:6a:89: 86:58:ae:76:5b:74:e9:dc:af:36:26:aa:bd:e0:63: 21:6a:c4:8a:55:f0:ad:fb:33:66:22:b2:95:25:37: 41:47:18:93:b2:03:a0:be:4c:37:ec:95:b7:1e:f4: 98:da:95:3f:f0:7f:b5:c2:95:3c:70:1b:35:78:42: b8:ba:89:e9:f7:58:bb:47:f0:ca:ba:3d:e9:da:08: 5d:24:32:dd:db:50:35:97:0a:be:d9:96:80:d4:0d: 66:12:d7:27:5d:57:b3:0c:78:38:f9:80:68:3e:9c: ab:d0:07:fb:4a:25:91:ac:db:61:78:2d:5e:b7:74: 82:ce:6c:cc:c3:f5:30:28:b1:46:e0:f4:b8:de:8e: ed:63:d7:17:cb:8c:6c:c1:25:e3:3d:02:2b:f5:56: b6:a9:b4:dd:d5:bc:ad:a8:64:ef:d6:6d:8f:86:32: cc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:64:5A:F0:56:44:99:6E:D4:4F:45:5E:01:3C:9A:A3:CA:0B:FA:9C X509v3 Authority Key Identifier: keyid:AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:4d:d3:c9:9d:73:c4:6e:30:ed:d6:7a:0d:80:66:26:ca:10: 90:f0:e5:cf:25:87:34:b0:dd:ad:a4:04:df:3e:bc:a9:de:86: ca:91:b3:5e:fd:f8:ca:40:b4:9e:96:84:96:84:3b:b0:b8:86: d0:11:9b:6d:0f:55:27:03:f5:10:57:af:c1:88:26:5b:49:d2: d1:1d:66:d5:04:97:20:b7:f7:8e:86:7f:3f:96:79:bf:3f:91: 87:89:b9:b0:6a:52:3d:e2:75:e4:a0:6d:bc:28:3f:ee:30:e9: b0:e2:39:34:62:07:c1:08:f2:60:07:d7:df:86:7b:2e:48:f7: d8:a9:40:42:61:ff:20:d3:86:2a:af:4d:75:ad:ee:c3:da:29: 0a:e7:e9:45:28:54:df:2a:54:68:0f:ef:1e:7d:5a:3a:f9:18: 2a:a8:4f:33:78:c3:cb:32:fd:61:74:a0:48:d0:74:cc:bb:3b: 2f:dc:4a:41:65:96:ec:46:8d:9f:15:eb:8a:fa:de:49:b8:fa: c1:4d:dc:ff:18:f3:56:f5:7f:22:84:c9:dc:af:d1:20:74:90: 09:3c:da:91:c7:89:e5:e0:e6:a9:06:b6:08:03:f0:aa:59:0f: 74:47:8b:e7:3d:d1:70:5d:65:83:58:4c:c0:90:7b:32:70:26: 4c:30:3f:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstQcQ93i6LHFm1XcMiswdXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNThlYjdjNjE3NTBjY2UzMzNjZDAwMjZjNzdjOTNjYmU0 NjVkOTgwHhcNMjUxMjE3MTcwMDQzWhcNMjUxMjE4MTcwMDQzWjAzMTEwLwYDVQQD Eyg4MzY0NWFmMDU2NDQ5OTZlZDQ0ZjQ1NWUwMTNjOWFhM2NhMGJmYTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyscV12bHokOgEvrOwHxCQ7kfPG5L 2a4FqCrT3GqsXV6kPvQmvvdAVG+GrxmKhx8BtVoOO55bsKWMkkV8uezdptUsb/ya ppipqi5ASmV4Q1wrKbA9MtF7aomGWK52W3Tp3K82Jqq94GMhasSKVfCt+zNmIrKV JTdBRxiTsgOgvkw37JW3HvSY2pU/8H+1wpU8cBs1eEK4uonp91i7R/DKuj3p2ghd JDLd21A1lwq+2ZaA1A1mEtcnXVezDHg4+YBoPpyr0Af7SiWRrNtheC1et3SCzmzM w/UwKLFG4PS43o7tY9cXy4xswSXjPQIr9Va2qbTd1bytqGTv1m2PhjLMJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINkWvBWRJlu1E9FXgE8mqPKC/qcMB8GA1UdIwQY MBaAFKxY63xhdQzOMzzQAmx3yTy+Rl2YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckZqcmZHRjFETTR6UE5BQ2JIZkpQTDVHWFpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lYmQwYzktN2EzNi00MDM2LTg2NTgt MWRlMDBiZDg5MTJjLzEvckZqcmZHRjFETTR6UE5BQ2JIZkpQTDVHWFpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9lYmQwYzktN2EzNi00MDM2LTg2NTgtMWRlMDBiZDg5MTJj LzEvckZqcmZHRjFETTR6UE5BQ2JIZkpQTDVHWFpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhk3TyZ1z xG4w7dZ6DYBmJsoQkPDlzyWHNLDdraQE3z68qd6GypGzXv34ykC0npaEloQ7sLiG 0BGbbQ9VJwP1EFevwYgmW0nS0R1m1QSXILf3joZ/P5Z5vz+Rh4m5sGpSPeJ15KBt vCg/7jDpsOI5NGIHwQjyYAfX34Z7Lkj32KlAQmH/INOGKq9Nda3uw9opCufpRShU 3ypUaA/vHn1aOvkYKqhPM3jDyzL9YXSgSNB0zLs7L9xKQWWW7EaNnxXrivreSbj6 wU3c/xjzVvV/IoTJ3K/RIHSQCTzakceJ5eDmqQa2CAPwqlkPdEeL5z3RcF1lg1hM wJB7MnAmTDA/Ow== -----END CERTIFICATE-----Generated at Wed Dec 17 20:50:17 2025 by rpki-client